agent-office-studio 0.8.0 → 0.9.2

package/CHANGELOG.md

@@ -4,6 +4,67 @@ Notable changes to Agent Office. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow
 [Semantic Versioning](https://semver.org/).
 
+## 0.9.2 — 2026-10-18
+
+### Added
+- **Telegram.** Talk to the office from your phone through your own bot: `/telegram <token>`, then `/telegram pair` and `/pair <code>` to the bot. Only the paired account works. Replies, finished jobs and flags come back; `/grant` and `/auto` act on jobs; photos, voice notes and files go both ways.
+- **Apps on the home screen.** Apps agents build get an icon and open in a sandboxed window.
+- **Right-click menu** on the office floor: tidy windows, open or close panes, recenter, appearance, settings.
+- The header and footer fold away while you scroll a list.
+- `npm run watch` rebuilds the web app on change.
+
+### Fixed
+- A session that goes quiet (no answer from the model, or a tool that never returns) is noticed and recovered; `STALL_MODEL_MIN` and `STALL_TOOL_MIN` tune how long.
+- A cleared session that lingers on a background task is ended and the job carries on.
+
+## 0.9.1 — 2026-10-15
+
+### Added
+- **Windows.** On a wide screen Chat, Jobs, Projects and Team each get their own window: drag the title bar, pull any edge or corner to resize, close with the x, click to bring one forward. Where each sits is remembered. On a phone they go back into the sidebar. In Dock mode the job card can be dragged by its top and resized from any edge; double-click puts it back.
+- **Build mode.** Pick up a desk, the communal table, the pool table or anything the office has bought, slide it about on a snapped grid with a green or red patch under it, and put it down. The arrangement is saved per layout.
+- **PDFs open in the file viewer** (pdf.js), loaded on the first PDF opened. The server serves a file as a PDF only if it really is one.
+- **Lend only some of your agents.** A link can name which of your agents a guest may use; their jobs run on those alone.
+- Setting to turn break-room chatter and pool off; off posts nothing to #chill-room.
+
+### Changed
+- Every office layout is free to switch to.
+- Answering a job (in its thread, by reply or through Chief) clears what it was waiting on you for, and the Needs you pane can dismiss one ask or all of them.
+
+### Fixed
+- The test scripts that copy the app into a temp folder now skip `desktop/`; its 4.5 GB Tauri build folder was filling the disk mid-suite.
+
+## 0.9.0 — 2026-10-15
+
+### Added
+- **Edit files in the office.** Each project has an Edit files button that opens its folders and text files; Cmd/Ctrl+S saves, and a save is refused if the file changed on disk meanwhile. The editor is CodeMirror, with syntax highlighting by file type, line numbers, folding, bracket matching, find (Cmd/Ctrl+F) and undo, coloured from the office theme, and it loads only when opened.
+- A job's "What changed" list has an Edit button on each changed file. Jobs also remember the files their agent wrote to, and where git can't say what changed they show them as "Files edited", each with an Edit button.
+- **A desktop app** (Tauri) with a designed DMG installer. The dmg is ad-hoc signed as a whole bundle so a downloaded copy isn't reported damaged; the README covers the Gatekeeper workaround.
+- Chief can hand out several jobs from one message, at most one per person.
+- Quality badges: Straight through, Second wind, Team player, Second pair of eyes and Quick study.
+
+### Security
+- Two hardening passes over guests, links and the office page. The key cookie holds a MAC of the key, and the office page sends a CSP that limits images and forms. Leaderboard rate limits use the IPv6 /64.
+- Guests: a guest's cache tokens are counted call by call (reads at a tenth), their replies and open jobs are held to the host's current limits, an unlinked guest's open jobs are stopped, and `guests.json` is written private to the account.
+- Link handles and project names match exactly (case aside), and prototype names are refused as link ids.
+- Snapshotting never runs a project's clean or smudge filters. Away jobs are limited to roster, flag and clear_context. Below Full autonomy, `attach_files` takes only files in the job's project. Job tokens stay out of the projects folder.
+- Desktop: the office is proved before its key is sent, IPC is scoped to its port, and `tauri.localhost` is allowed only on Windows on its default port.
+
+### Fixed
+- A process-group kill happens only when the group's leader is the process we saw.
+- A bet on a job handed over by one of its parties is voided.
+- Visits drop copies with nothing to review and cap copies per guest.
+- The installed-package check in CI looked for a page title the app dropped on Oct 12, which kept CI red on master.
+
+## 0.8.1 — 2026-10-13
+
+### Added
+- Agents no longer leave processes running. Whatever a job started and left behind (dev servers, watchers, background test runs, test copies of a server) is stopped when the job ends. An agent can keep one with the new `keep_running` tool, and you are told what was kept and how to stop it.
+- Heavy builds and full test suites take turns. Agents call the new `heavy_work` tool before a Gradle, Xcode or emulator run, a whole-app jest or vitest run, or a docker build. While one is running, the next waits for its turn and you get a **Delayed** notice in #general.
+- New jobs wait while the machine is struggling: when the number of working agents reaches **Agents working at once** in Settings (default 4, `OFFICE_MAX_AGENTS`), or, once 3 or more agents are working, when the machine is swapping memory hard or the processor is badly overloaded. Up to 3 agents always start, whatever else the laptop is doing. You get an **On hold** notice in #general and a desktop notification saying why, and the job starts by itself when that changes.
+
+### Changed
+- Agents are told to run jest with `--maxWorkers=2`.
+
 ## 0.8.0 — 2026-10-13
 
 ### Added

package/README.md

@@ -23,6 +23,17 @@ npm install
 npm start            # builds, then serves on http://localhost:4317
 ```
 
+Prefer an app window to a browser tab? There's a [desktop app](docs/desktop.md)
+(Tauri, macOS): it starts the office for you on a free local port and opens it
+in its own window. Build it from source with `cd desktop && npm install && npm run build`.
+
+**Opening a downloaded dmg.** The app isn't notarized by Apple yet, so macOS
+blocks it the first time. If you see "Agent Office is damaged" or "can't be
+opened", it isn't damaged: run `xattr -cr "/Applications/Agent Office.app"` in
+Terminal, then open it. Or right-click the app, choose Open, and confirm (on
+macOS 15+: System Settings, Privacy & Security, Open Anyway). Details in
+[Desktop app](docs/desktop.md#opening-a-downloaded-build).
+
 You need Node.js 20+, git, and [Claude Code](https://docs.anthropic.com/en/docs/claude-code)
 signed in on this machine (or an Anthropic API key). Your projects are the
 folders next to this one (or, with `agentoffice`, in the folder you run it from) — see [Getting started](docs/getting-started.md).
@@ -82,6 +93,7 @@ folders next to this one (or, with `agentoffice`, in the folder you run it from)
 | [Configuration](docs/configuration.md) | every setting |
 | [Talking out loud](docs/voice.md) | speech in and voices out |
 | [On your phone](docs/phone.md) | install it like an app |
+| [Desktop app](docs/desktop.md) | the Tauri shell: how it starts the office, building it |
 | [How the office works](docs/how-it-works.md) | jobs, office tools, where things are kept |
 | [Security](docs/security.md) | who can reach it and what jobs may do |
 | [Development](docs/development.md) | dev server, shipping, testing safely |